MAL-2025-42024 Malicious code in metamask-api (npm)

The package metamask-api was found to contain malicious code...

Malicious code in test-lwcs (npm)

The package test-lwcs was found to contain malicious code...

Malicious code in schemacachiie (npm)

The package schemacachiie was found to contain malicious code...

CVE-2024-28080

creationtimestamp| type| source ---|---|--- 2025-08-29 08:28:59+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lxjnc5a2un2b 2025-08-29 08:39:32+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3lxjnuyywif2r 2025-08-29 13:01:40+00:00| published-proof-of-concept|...

FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability

FormCms v0.5.5 contains a stored cross-site scripting XSS vulnerability in the avatar upload feature. Authenticated users can upload .html files containing malicious JavaScript, which are accessible via a public URL. When a privileged user accesses the file, the script executes in their browser...

USN-7722-1: Linux kernel vulnerability

A security issues was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Network traffic control; CVE-2025-38350...

MAL-2025-41588 Malicious code in openzeppelin-contracts-5.0.2 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in localchat (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in itx-zara-web-common (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-ts-view (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in telegrampremiumfix (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in peew (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41669 Malicious code in e89-security (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41641 Malicious code in continuoustimemarkovmodel (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in beautifulsoup-new (PyPI)

--- -= Per source details. Do not edit below this line.=-...

ALSA-2025:14899 Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL executes arbitrary code in restore operation CVE-2025-8715 postgresql: PostgreSQL code execution in restore operation CVE-2025-8714 For more details about the security issues,...

Fedora 41 : mod_auth_openidc (2025-be0c6f25ce)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-be0c6f25ce advisory. Rebase to new version resolves CVE-2025-31492 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

JetBrains Junie 安全漏洞

JetBrains Junie is a coding agent from the Czech company JetBrains. A security vulnerability exists in JetBrains Junie that stems from the searchproject function that could lead to information disclosure. The following versions are affected: versions prior to 252.284.66, versions prior to...

DRUPAL-CONTRIB-2025-104

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

DRUPAL-CONTRIB-2025-103

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...